The SSL connection could not be established - While setting up LoadBalancer using Consul and LeastConnection.

[ks1990cn]

Hi @raman-m @ggnaegi / Anyone ,

Can you please help me to resolve error mentioned in title?
I've created 3 web api projects - 2 of them to replicate DownstreamApi Instance1 and Instance2, 1 is to replicate API Gateway.

when I try to reach downstream using upstream of API Gateway, and when it tries to find hostandport anc check for services available, it suddenly breaks stating SSL Connection could not be established.

Can you help me by cloning below code and let me know what I am missing in setup. Here is GIF of problem and code from where you can clone.

Please let me know any input required from me.

Code path changes I've done:
https://github.com/ks1990cn/Ocelot/tree/LoadBalancerSample

[raman-m]

Tanmay, I'm busy with

• Release 22.0 #1805

Regarding SSL errors... Show us your routes JSON please!
Which certificate do you use: SSL signing authority or self-signed certificate?

Did you read this: SSL Errors ❓

[ggnaegi]

@ks1990cn you should check the consul parameters. https://developer.hashicorp.com/consul/docs/install/ports 8500 is port for http scheme.

[raman-m]

Moreover, Consul server default port is configurable. And this def port is open for connections.
So, Tanmay have to check Consul settings port, and Ocelot "ServiceDiscoveryProvider" port.
That's why a connection cannot be established. This is my understanding...

[ks1990cn]

Let me try again

[ks1990cn]

Its fixed now, I hosted consul on right port, my scheme was https instead http, and it was causing not to run. Thanks alot team!!

"ServiceDiscoveryProvider": {
     "Scheme": "https",
     "Host": "localhost",
     "Port": 8500,
     "Type": "Consul"
   }

[raman-m]

Congrats on fixing it finally! 🥳
Could we close this discussion plz?

[raman-m]

If you use Docker containers then it seems you use self-signed certificates.
There is no sense to use https scheme for local development environment! So, yes, switching to http scheme should solve any SSL connection problems.

[ks1990cn]

Correct close this issue,
I've added these changes under sample folder of Ocelot in my fork.

What you guys think, should I publish this and recorded GIF (for documentation) so it can be sample setup for other contributors?

Do you want these type of contributions or just prefer
Bug work for now?

@raman-m @ggnaegi

[ks1990cn]

I can raise PR and documentations which you can approve.